Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File:                     C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier:          LuoUdDv9/6Chva9BHy1UpSwXn8e+4soBq0VyphbUXCo=
Subject key identifier:   96:71:6B:FA:75:3C:8F:DA:82:AA:06:6C:7A:D2:E4:3D:F2:6C:03:B5
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer:       /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial:       019E2F965DEC15E4B1333B85F6E4BEBF853C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 07:00:44 +0000
Manifest this update:     Sat 16 May 2026 07:00:44 +0000
Manifest next update:     Sun 17 May 2026 07:00:44 +0000
Files and hashes:         1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: wcZMMKt3WeSVWeGAXYSuGbLM8dHNeu4dU0Yuz8/0WQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:5d:ec:15:e4:b1:33:3b:85:f6:e4:be:bf:85:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
        Validity
            Not Before: May 16 07:00:44 2026 GMT
            Not After : May 17 07:00:44 2026 GMT
        Subject: CN=96716bfa753c8fda82aa066c7ad2e43df26c03b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:32:48:81:bc:f9:e8:d4:7d:1e:a7:0c:c9:
                    20:e9:03:d0:78:f6:19:e5:74:96:2e:18:09:a8:41:
                    34:c4:7e:c7:e8:31:3c:c9:0f:3b:f2:fd:b7:1f:f1:
                    46:59:e0:6f:01:a9:4b:56:57:95:6b:52:db:66:63:
                    33:41:3d:f7:c0:7a:85:e9:bf:db:60:7e:1b:d2:65:
                    13:eb:56:61:3b:5b:ad:27:27:bf:ab:09:c0:04:97:
                    e5:37:0f:39:0a:b7:6c:5f:85:94:dd:75:53:1b:c6:
                    09:4e:53:74:a4:7d:51:ae:4e:8f:ac:66:31:38:e1:
                    29:a9:4e:83:d3:37:61:44:99:84:f4:eb:de:2c:91:
                    79:e7:1c:6b:23:ab:e5:b1:96:4b:1e:84:dc:a8:db:
                    11:e8:db:dd:5b:c4:20:fb:1f:ac:94:80:31:13:62:
                    c8:53:4e:f5:09:a4:a2:ef:1c:e1:6f:35:c3:50:7d:
                    60:bf:91:79:9d:4a:07:28:4c:a9:04:7a:1e:a9:e4:
                    19:9f:a9:62:d3:a4:11:82:f7:e9:d8:99:0c:6b:74:
                    66:52:80:bb:8c:d4:d4:d1:24:40:7b:af:cb:91:30:
                    c2:48:5d:5f:ee:c5:67:39:e7:ba:2c:e4:39:9a:d0:
                    d9:93:c0:7c:28:1c:52:a5:6e:b1:e9:74:a2:79:ac:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:71:6B:FA:75:3C:8F:DA:82:AA:06:6C:7A:D2:E4:3D:F2:6C:03:B5
            X509v3 Authority Key Identifier:
                keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:de:02:95:bf:f8:73:a9:71:4b:e0:ab:62:20:e1:8b:72:
         c7:b3:c4:77:77:0b:a4:9b:b0:0b:4b:7a:cb:dd:e7:4a:90:f7:
         6d:36:9a:ce:9f:a9:9f:b5:34:49:be:35:15:17:5f:7c:e9:93:
         17:6a:65:60:a8:bd:cc:0a:ad:c9:37:19:26:b9:82:cb:ab:dd:
         04:ef:f2:a9:14:ee:82:92:5e:ef:97:15:60:96:a2:91:d7:57:
         53:d2:80:8b:61:6b:02:77:d9:88:77:11:6d:cd:21:f3:18:47:
         dd:b7:42:b2:88:e8:b2:d0:e2:a5:d4:66:7d:d3:c1:c0:9b:1a:
         01:2e:1f:b6:9c:50:ee:ea:b0:bf:80:96:78:6e:55:68:15:cb:
         57:8c:90:4a:71:a2:cf:2f:98:7f:f6:9e:1f:f1:d5:09:f7:a4:
         20:29:31:b2:04:a1:eb:63:2e:62:f6:aa:93:0e:f3:aa:c3:9b:
         86:4d:e6:15:e3:cf:91:59:53:3c:02:69:ac:6f:71:47:0d:15:
         fa:3c:95:07:5d:06:9a:55:c5:85:ff:c4:cb:46:af:4a:6d:2f:
         59:c0:0c:36:b2:e8:63:83:7e:9f:94:2c:25:f0:81:70:ba:e7:
         3a:96:c7:de:b6:a6:e4:22:da:83:30:57:5b:1c:b7:0c:dc:73:
         5f:bf:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:10:57 2026 by rpki-client